Whether your business is large or small, you’ll encounter customers who will want to ensure your business is ISO 27001 certified. 

This globally recognised standard helps businesses like yours manage information security and improve security practices.  It’s an excellent credential that boosts customer confidence in your ability to protect their data and remain resilient against data breaches and other cyber threats.   

Grant Thornton’s experts are ISO 27001 lead auditors who have helped many businesses every step of the way on their journey to certification. We are a safe pair of hands dedicated to making the certification process easy to navigate and successful, while giving you the confidence to enhance your information security management systems (ISMS).

How we can help 

With our support, guidance and expertise, your journey to certification will involve four stages:

Our comprehensive planning methodology will keep you up to date with the latest ISO 27001:2022 requirements so you can seamlessly transition from the ISO 27001:2013 standard.

We'll evaluate your current security posture so you’re thoroughly prepared for a successful certification process. 

Our team will work with yours to identify and remedy any gaps in your information security management system so you meet all the necessary standards. 

Together, we’ll develop a robust internal audit plan to support the requirements for ISO 27001:2022. Our internal audit will also ensure your organisation maintains compliance and continues to make any necessary improvements ensuring ongoing compliance and continuous improvement. 

Hamish Bowen
Partner and National Director, Consulting
Hamish Bowen